Privacy Policy

This Privacy Policy explains how PEMRAVO, LLC, operating through pemravo.com, collects, uses, stores, protects, and shares personal information when customers visit our website, place an order, communicate with us, request a return or refund, or otherwise use our services.

1. Information We Collect

We may collect information that customers provide directly to us, including name, billing address, shipping address, email address, telephone number, order details, account information, customer service communications, return or refund requests, and other information reasonably required to provide our services.

We may also collect limited technical information automatically when the website is used, such as IP address, browser type, device information, referring pages, approximate location derived from technical data, website activity, session information, and security-related logs.

2. How We Use Personal Information

Personal information is used only for legitimate business and service-related purposes. These purposes may include processing orders, arranging global delivery, providing order tracking, responding to customer questions, managing returns and refunds, processing payments, preventing fraud, maintaining website security, meeting legal obligations, and improving the reliability of our services.

3. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or similar privacy laws apply, we process personal information on one or more lawful bases, including performance of a contract, compliance with legal obligations, legitimate business interests, and consent where consent is required.

For example, order and delivery information is processed because it is necessary to complete a purchase and provide the requested service. Security monitoring may be carried out based on our legitimate interest in protecting customers, transactions, and our website against misuse or fraud.

4. Payment Information and Payment Providers

Payments may be processed through Stripe and PayPal, depending on the payment method selected during checkout. These payment providers may collect and process payment-related information in accordance with their own privacy and security practices.

We do not require customers to send complete card numbers, card security codes, or payment credentials directly to us by email or customer service message. Sensitive payment information is handled through the applicable secure payment environment provided by Stripe, PayPal, or another approved checkout payment method shown at the time of purchase.

5. Payment Security

We take reasonable measures to reduce payment-related risks and protect transaction information. Checkout and account communications are transmitted through secure connections using HTTPS and SSL/TLS encryption.

Where supported by payment providers, additional controls may include tokenization, payment authorization checks, fraud screening, card verification, device or session checks, and additional authentication measures. These measures are intended to reduce unauthorized access and help protect payment activity from interception or misuse.

6. Website and Data Security Measures

We use a combination of technical and organizational measures designed to protect personal information against unauthorized access, accidental loss, misuse, alteration, or disclosure.

Measures may include HTTPS-secured website connections, SSL/TLS encryption during data transmission, access restrictions, administrative permission controls, secure account credentials, regular software updates, security monitoring, limited staff access to customer information, and review of suspicious activity where appropriate.

Access to personal information is limited to individuals or service providers who need the information to perform legitimate business functions.

7. Data Minimization

We aim to collect only the information reasonably necessary for the relevant service. We do not intentionally request unrelated personal information when it is not needed for order fulfillment, payment support, customer service, legal compliance, fraud prevention, or website operation.

8. Data Retention

Personal information is generally retained for no longer than 1 year from the date it is collected or from the completion of the relevant customer interaction, whichever is later, unless a longer retention period is required by applicable law, tax rules, accounting requirements, fraud prevention obligations, payment dispute procedures, or another legal requirement.

When information is no longer reasonably required, we take appropriate steps to delete, anonymize, or otherwise securely dispose of it.

9. Order, Shipping, and Delivery Information

For orders requiring global delivery, we may share the information necessary to complete shipment with carriers, logistics providers, customs-related service providers, or other parties involved in delivery.

This information may include the recipient's name, shipping address, contact details, order reference, and limited shipment information. We share only the information reasonably necessary to arrange and complete delivery, support tracking, or address delivery issues.

10. Returns, Refunds, and Customer Support

When a customer contacts us regarding a return, refund, damaged item, incorrect item, payment issue, or delivery concern, we may retain the related communication and supporting information while the matter is being reviewed.

This may include order numbers, photographs, correspondence, refund records, tracking information, and information needed to verify the transaction or resolve the request. Approved refunds are handled in accordance with our Return & Refund Policy.

11. Sharing of Personal Information

We do not sell personal information as part of our ordinary business operations.

Personal information may be shared with service providers where reasonably necessary to operate the website, process payments, fulfill orders, provide shipping, manage customer support, prevent fraud, maintain technical systems, or comply with applicable law.

These service providers may include payment processors such as Stripe and PayPal, shipping and logistics providers, hosting or website service providers, security vendors, analytics providers, and professional advisers where appropriate.

12. International Data Transfers

Because we provide services and shipping internationally, personal information may sometimes be processed or stored in a country different from the customer's country of residence.

Where required by applicable privacy law, including the GDPR, reasonable safeguards may be used for international transfers, such as contractual protections, approved transfer mechanisms, or reliance on legally recognized transfer arrangements.

13. Cookies and Similar Technologies

Our website may use cookies or similar technologies to support essential website functions, maintain shopping cart sessions, remember user preferences, improve website performance, help prevent fraud, and understand general website usage.

Some cookies may be necessary for checkout, security, authentication, or other essential functions. Where consent is legally required for non-essential cookies, appropriate consent mechanisms may be provided.

14. GDPR and Privacy Rights

Where the GDPR applies, eligible individuals may have rights relating to their personal information, including the right to request access, correction, deletion, restriction of processing, objection to certain processing, and data portability.

Where processing is based on consent, consent may also be withdrawn where legally permitted. Exercising a privacy right does not affect processing that was lawfully carried out before the request.

Customers who wish to make a privacy request may contact us at [email protected] or through our Contact Us page. We may request reasonable information to verify identity before completing certain privacy requests.

15. Security Incidents and Unauthorized Access

Although no online system can guarantee absolute security, we maintain reasonable procedures intended to reduce the risk of unauthorized access or data loss.

If we become aware of a security incident involving personal information, we will evaluate the nature and scope of the incident and take reasonable steps to contain and address it. Where notification is required by applicable law, affected individuals or relevant authorities will be notified in accordance with those legal requirements.

16. Children's Privacy

Our website and services are intended for general commercial use and are not directed toward children who are below the age at which they may legally provide consent under applicable privacy law.

We do not knowingly collect personal information from children in circumstances where parental or guardian consent is legally required. If we learn that such information has been collected improperly, we will take reasonable steps to remove it.

17. Privacy Policy Updates and Contact

We may update this Privacy Policy from time to time to reflect changes in our services, technology, payment processing arrangements, shipping operations, legal requirements, or security practices.

The version published on pemravo.com will be the current version of this policy. Material changes may be communicated through the website or by other reasonable means where appropriate.

For questions about this Privacy Policy, personal information, data security, payment privacy, or the exercise of applicable privacy rights, customers may contact us at [email protected] or visit our Contact Us page.